City: unknown
Region: unknown
Country: Egypt
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 41.44.148.99
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20388
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;41.44.148.99. IN A
;; AUTHORITY SECTION:
. 596 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400
;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 16:07:47 CST 2022
;; MSG SIZE rcvd: 10599.148.44.41.in-addr.arpa domain name pointer host-41.44.148.99.tedata.net.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
99.148.44.41.in-addr.arpa name = host-41.44.148.99.tedata.net.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 14.255.48.223 | attackbots | /var/log/messages:Dec 13 04:46:15 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1576212375.506:2282): pid=13976 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-server cipher=aexxxxxxx28-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=13977 suid=74 rport=54336 laddr=104.167.106.93 lport=22 exe="/usr/sbin/sshd" hostname=? addr=14.255.48.223 terminal=? res=success' /var/log/messages:Dec 13 04:46:15 sanyalnet-cloud-vps audispd: node=sanyalnet-cloud-vps.freeddns.org type=CRYPTO_SESSION msg=audhostname(1576212375.509:2283): pid=13976 uid=0 auid=4294967295 ses=4294967295 msg='op=start direction=from-client cipher=aexxxxxxx28-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=13977 suid=74 rport=54336 laddr=104.167.106.93 lport=22 exe="/usr/sbin/sshd" hostname=? addr=14.255.48.223 terminal=? res=success' /var/log/messages:Dec 13 04:46:16 sanyalnet-cloud-vps fail2ban.filter[1551]: I........ ------------------------------- |
2019-12-13 13:24:34 |
| 159.89.46.72 | attackbots | " " |
2019-12-13 13:05:18 |
| 94.191.119.176 | attackbots | Dec 12 21:57:03 firewall sshd[26825]: Invalid user bhavani from 94.191.119.176 Dec 12 21:57:05 firewall sshd[26825]: Failed password for invalid user bhavani from 94.191.119.176 port 58963 ssh2 Dec 12 22:03:56 firewall sshd[27039]: Invalid user maiah from 94.191.119.176 ... |
2019-12-13 09:07:32 |
| 217.75.217.242 | attackbotsspam | Dec 13 05:50:40 jane sshd[941]: Failed password for root from 217.75.217.242 port 52630 ssh2 Dec 13 05:56:15 jane sshd[5021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.75.217.242 ... |
2019-12-13 13:09:28 |
| 139.59.20.248 | attack | Dec 13 05:49:47 icinga sshd[26818]: Failed password for mysql from 139.59.20.248 port 50904 ssh2 Dec 13 05:56:09 icinga sshd[27470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.20.248 ... |
2019-12-13 13:14:31 |
| 159.89.235.61 | attackbotsspam | IP blocked |
2019-12-13 13:01:15 |
| 83.14.199.49 | attackbots | $f2bV_matches |
2019-12-13 13:06:56 |
| 165.227.53.38 | attackbotsspam | Dec 13 05:50:19 OPSO sshd\[7884\]: Invalid user inshen from 165.227.53.38 port 49854 Dec 13 05:50:19 OPSO sshd\[7884\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.53.38 Dec 13 05:50:21 OPSO sshd\[7884\]: Failed password for invalid user inshen from 165.227.53.38 port 49854 ssh2 Dec 13 05:56:03 OPSO sshd\[9144\]: Invalid user eeeeeeeeee from 165.227.53.38 port 57662 Dec 13 05:56:03 OPSO sshd\[9144\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.53.38 |
2019-12-13 13:21:52 |
| 5.135.181.11 | attack | Dec 12 18:49:47 auw2 sshd\[17578\]: Invalid user jq123\$%\^ from 5.135.181.11 Dec 12 18:49:47 auw2 sshd\[17578\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3010967.ip-5-135-181.eu Dec 12 18:49:49 auw2 sshd\[17578\]: Failed password for invalid user jq123\$%\^ from 5.135.181.11 port 43956 ssh2 Dec 12 18:56:17 auw2 sshd\[18208\]: Invalid user caruk from 5.135.181.11 Dec 12 18:56:17 auw2 sshd\[18208\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3010967.ip-5-135-181.eu |
2019-12-13 13:08:04 |
| 101.255.52.171 | attackspambots | Dec 13 05:49:04 loxhost sshd\[32353\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.255.52.171 user=root Dec 13 05:49:05 loxhost sshd\[32353\]: Failed password for root from 101.255.52.171 port 46000 ssh2 Dec 13 05:55:54 loxhost sshd\[32511\]: Invalid user skappel from 101.255.52.171 port 54728 Dec 13 05:55:54 loxhost sshd\[32511\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.255.52.171 Dec 13 05:55:56 loxhost sshd\[32511\]: Failed password for invalid user skappel from 101.255.52.171 port 54728 ssh2 ... |
2019-12-13 13:29:28 |
| 180.76.116.68 | attackbotsspam | Dec 11 22:46:11 mailserver sshd[26858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.116.68 user=dovecot Dec 11 22:46:13 mailserver sshd[26858]: Failed password for dovecot from 180.76.116.68 port 48286 ssh2 Dec 11 22:46:13 mailserver sshd[26858]: Received disconnect from 180.76.116.68 port 48286:11: Bye Bye [preauth] Dec 11 22:46:13 mailserver sshd[26858]: Disconnected from 180.76.116.68 port 48286 [preauth] Dec 11 23:01:26 mailserver sshd[28132]: Connection closed by 180.76.116.68 port 51004 [preauth] Dec 11 23:08:02 mailserver sshd[28683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.116.68 user=r.r Dec 11 23:08:04 mailserver sshd[28683]: Failed password for r.r from 180.76.116.68 port 51912 ssh2 Dec 11 23:08:05 mailserver sshd[28683]: Received disconnect from 180.76.116.68 port 51912:11: Bye Bye [preauth] Dec 11 23:08:05 mailserver sshd[28683]: Disconnected from 180........ ------------------------------- |
2019-12-13 13:27:50 |
| 141.226.14.125 | attackspam | Lines containing failures of 141.226.14.125 Dec 13 05:46:03 server01 postfix/smtpd[8578]: connect from unknown[141.226.14.125] Dec x@x Dec x@x Dec 13 05:46:04 server01 postfix/policy-spf[8589]: : Policy action=PREPEND Received-SPF: none (pallages.com: No applicable sender policy available) receiver=x@x Dec x@x Dec 13 05:46:05 server01 postfix/smtpd[8578]: lost connection after DATA from unknown[141.226.14.125] Dec 13 05:46:05 server01 postfix/smtpd[8578]: disconnect from unknown[141.226.14.125] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=141.226.14.125 |
2019-12-13 13:23:02 |
| 187.162.24.195 | attackbotsspam | MultiHost/MultiPort Probe, Scan, Hack - |
2019-12-13 13:25:09 |
| 94.25.228.163 | attack | Unauthorised access (Dec 13) SRC=94.25.228.163 LEN=52 PREC=0x20 TTL=115 ID=16250 DF TCP DPT=445 WINDOW=8192 SYN |
2019-12-13 13:02:26 |
| 112.85.42.173 | attack | $f2bV_matches |
2019-12-13 13:29:15 |